f1f59b325499a3ad9b6f811e68199350bf136420514970fb8f7fc4f68533d300

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
07/03/2024, 20:23

Target

F1F59B325499A3AD9B6F811E68199350BF136420514970FB8F7FC4F68533D300[3].exe
Size

815KB
MD5

011ec9e1fc7c285774019277c31fae6e
SHA1

d9b5e14c489578d74a68765e9e2fc4aa612d3f32
SHA256

f1f59b325499a3ad9b6f811e68199350bf136420514970fb8f7fc4f68533d300
SHA512

6c4d0f0952b583f5e4b60e7149cdb2da8c2e7d6bd4e274fb0131ca0f773825e8bcfe27c474977783c8648e712a454462f456fcb400941dea7ea7bff0ea021f33
SSDEEP

12288:Oyh/62qWVT2AdlX6rxxH96K4B3PT84FtW9bIIRbmNZkLry5/58XY:7cWVHlX6rZ6K4BfT8stWGImNZkax8X

Score

1^/10

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
2940	F1F59B325499A3AD9B6F811E68199350BF136420514970FB8F7FC4F68533D300[3].exe
2940	F1F59B325499A3AD9B6F811E68199350BF136420514970FB8F7FC4F68533D300[3].exe

C:\Users\Admin\AppData\Local\Temp\F1F59B325499A3AD9B6F811E68199350BF136420514970FB8F7FC4F68533D300[3].exe
"C:\Users\Admin\AppData\Local\Temp\F1F59B325499A3AD9B6F811E68199350BF136420514970FB8F7FC4F68533D300[3].exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:2940